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1. (currently amended) A service comprising: 

determining that a mobile computer has lost connectivity to a first access point of a network; 

when the mobile computer roams to a second access point of the network, determining 
whether the second access point is authorized for first secure communication and if so, 

releasing access of the computer to first secure data on the network through the second access 
point, and otherwise releasing access of the computer to data other than the first secure data on the 
network through the second access poin t, wherein the mobile computer is authenticated at the first 
access point prior to losing connectivity thereto, wherein releasing access to secure data on the 
network through the second access point comprises releasing access to a set of secure data which 
differs from the secure data released when the mobile computer is connected to the first access point . 

2. (original) The service of Claim 1, wherein the service is undertaken by the mobile computer. 

3. (original) The service of Claim 2, wherein the service is undertaken by a hypervisor in the 
mobile computer. 

4. (original) The service of Claim 1, wherein the service is undertaken by at least one network 
resource outside the mobile computer. 

5-13 (canceled). 
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14, (currently amended) A system including a mobile computer and a network including secure 
data, comprising: 

means for determining that the mobile computer has lost connectivity to a first access point 
of the network; 

means for determining whether a second access point of the network to which the mobile 
computer has roamed is authorized for secure communication; and 

means for permitting the mobile computer to access secure data on the network through the 
second access point if the second access point is authorized for secure communication, and otherwise 
granting access to the computer to data other than the secure data through the second access point, 
wherein the means are embodied by a hvpervisor in the mobile computer . 



15-17 (canceled). 



18. (original) The system of Claim 14, wherein the mobile computer is authenticated at the first 
access point, prior to losing connectivity thereto. 



19. (currently amended) A method comprising: 

establishing communication between a mobile computer and a network through an access 
point; and 

based on at least one of: a location, or an identification, of the access point, either granting 
the computer access to secure assets in the network or granting the computer access to other than the 
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secure assets in the networ k, wherein the act of selectively granting is undertaken by a hypervisor in 
the mobile computer . 

20, 21 (canceled). 

22. (original) The method of Claim 19, wherein the computer is configured to access a first set of 
network assets when communicating through a first access point and a second set of network assets when 
communicating through a second access point. 
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